Topic: How to relay some domains to smtp2go

[gjverheij]

Hi all,

I am user of sme for a very long time (23 years). Last month my ips change to fiber by Freedom.nl with a static ip address. Smtp works fine with dkim spf and dmarc. https://www.mail-tester.com/ scrore 10/10, mxtoolbox smtp test 100% oke.

Only outlook/hotmail/live don't accept my mail (550 5.7.1 Unfortunately, messages from [91.132.42.xx] weren't sent. Please contact your Internet service provider since part of their network is on our block list (S3150).

At https://community.freedom.nl/t/problemen-met-eigen-mail-server-om-mail-te-sturen-naar-microsoft-hotmail-outlook-live-nl/3855/2

I see more users have this problem, a solution is to relay domains outlook.com, hotmail.com and live.com to an (free) account of smtp2go.

My question: How could i organise this by sme/qpsmtpd?


For some inspiration an explanation how to do with postfix:
https://community.freedom.nl/t/smtp-microsoft-s3150-zucht/2655/44


Best Gert-Jan


 

[Jean-Philippe Pialasse]

unfortunately, I think your are down the rabbit hole.

yes there are way to relay specific domains to an external smtp server. 
it is easy to tag known M$ domains…. but they are also handling more and more domain for their clients.  how do you identify them?

so best approach is to delrgate all your emails unfortunatly… or get your ISP remove  this block from the blacklist which won’t happen as you have a dedicated ip from a dynamic ip range block.  which seems like a static ip but is not. 
also if you mamage to get a real static IP, using a cloud server as an example, you might want to register to the M$ program to  monitor your ip reputation and being able to dispute directly some issues

[ReetP]

Yup. No easy solution. Postfix won't stop you getting blocked by M$ or GobbleMail

They don't want you selfhosting mail servers because "it stops spam", despite M$ & Google hasting vast amounts themselves.

Yes you could try relaying via your ISP, until they decide to use O365 and require OAuth or 2FA...

We use authsmtp. (I have no affiliation) The way to go.

[ReetP]

NB you only need to setup outgoing. Check Email in server-manager.

Incoming should be fine unless your ISP blocks ports.

[TerryF]

Can attest to AuthSMTP simple to add in server-manager have yet to have had an issue, of course all paid,

Tried signing up at smtp2go, dont allow free email domains ala @gmail, @yahoo.com etc but it looks similar to AuthSMTP

[Gary Douglas]

hotmail now block all new IP mailservers and a request has to be made to allow send to hotmail. You have to login to microsoft with an account and request delisting. This URL worked for me last couple of times I had IP changes; https://support.microsoft.com/en-us/getsupport?oaspworkflow=start_1.0.0.0&wfname=capsub&productkey=edfsmsbl3&locale=en-us&ccsid=635900597399910848

[gjverheij]

unfortunately, I think your are down the rabbit hole.

yes there are way to relay specific domains to an external smtp server. 
it is easy to tag known M$ domains…. but they are also handling more and more domain for their clients.  how do you identify them?

so best approach is to delrgate all your emails unfortunatly… or get your ISP remove  this block from the blacklist which won’t happen as you have a dedicated ip from a dynamic ip range block.  which seems like a static ip but is not. 
also if you mamage to get a real static IP, using a cloud server as an example, you might want to register to the M$ program to  monitor your ip reputation and being able to dispute directly some issues

Thanks for your response Jean-Philippe. I understand your expression regarding the rabbit hole (-: I think it would be best to tackle the problem at the root and contact the isp. I tried to assess the reputation of the IP address with a website, that seemed fine However, I was not aware of the possibility that an IP address has been used in a DHCP role in addition to static own. Is there a way to check this? That could support my complaint with the ISP.

Best Gert-Jan

[gjverheij]

Yup. No easy solution. Postfix won't stop you getting blocked by M$ or GobbleMail

They don't want you selfhosting mail servers because "it stops spam", despite M$ & Google hasting vast amounts themselves.

Yes you could try relaying via your ISP, until they decide to use O365 and require OAuth or 2FA...

We use authsmtp. (I have no affiliation) The way to go.

 Thanks for your reaction, Best Gert-Jan

[gjverheij]

hotmail now block all new IP mailservers and a request has to be made to allow send to hotmail. You have to login to microsoft with an account and request delisting. This URL worked for me last couple of times I had IP changes; https://support.microsoft.com/en-us/getsupport?oaspworkflow=start_1.0.0.0&wfname=capsub&productkey=edfsmsbl3&locale=en-us&ccsid=635900597399910848

Thanks, I have done this, but no result, Best Gert-Jan

[Gary Douglas]

microsoft don't do this immediately, and it may take some coersion to make them do it. Persistence works. They open a support request ticket with a number, you may have to respond to them several times, eventually they advise it is delisted. After that it can take up to 3 days for that to propogate to all their mailservers.

[ReetP]

However, I was not aware of the possibility that an IP address has been used in a DHCP role in addition to static own. Is there a way to check this? That could support my complaint with the ISP.

M$ (and others) block entire IP ranges. As JP has said, your IP will lie in a 'residential' block of IP addresses. Trying to get an individual one unblocked will probably be more trouble than it is worth if it is even possible. Gmail is likely to block you at some stage as well, and possibly others. You will be firefighting the whole time.

It is unlikely your ISP can, or will, do anything about it, and they may well tell you that hosting a mail server on their IP addresses is not in their terms. I doubt they will be sympathetic to your case.

You may also have difficult setting up rDNS.

So yes, you may be able to get it delisted as per Garys comments, but you are likely to run into an endless list of niggles,

A few big players are now monopolising the market and are determining who can host mail - and are pushing you very hard to use their (paid for) services. Not to mention mail filtering services like Mimecast etc.

I would save my time and effort and either move to a different IP/host that is not so easily blocked - either a proper business host with genuine static IP (hard to check), some sort of cloud VM, or get yourself an upstream relay like authsmtp or smtp2go and let them deal with the problem.

I know none of this is what you want to hear, but you are asking us for our knowledge and experience, and regrettably from experience these are the answers.

[TerryF]

Have now setup acct and used smtp2go, however find AuthSMTP to be a superior product far easier to use..particulary suited to use with SME, of course only paid options, smtp2go does have a free starter option, but need their details adding to DNS settings when adding domain sender option, AuthSMTP not so.